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Senator Grusslcv: 

I write in response to your letter of 27 August 201? requesting information about 
intentional and willful misuse of surveillance authorities. 

Since I January 20021. there have been 12 substantiated instances of intentional misuse of 
ihe signals intelligence (S1G1NT) authorities of the Director of the National Security Agency , 
Ihe NSA Office of the Inspector General (OtG) currently has two open in\ estimations into 
alleged misuse of S1GIN I and is reviewing one allegation for possible investigation. 



I, C ivilian Employee, Foreign Location 

In 201 1. before an upcoming reins estimation polygraph, the subject reported that in 2004. 
"out of curiosity." he performed a SIG1NT query of his home telephone number and the 
telephone number of his girlfriend, a foreign national. The S1G1NT system prevented the query 
on the home number because it was made on a US person The subject \iewed the metadata 
returned by the query on his girlfriend's telephone, 

Ihe appropriate GIG conducted an investigation. The subject's actions were found to be 
in violation of United States Signals Intelligence Directive (USS1U) IS (Legal Compliance and 
U.S.. Person Minimization Procedures). 

The matter was referred to Do.1 in 2011 for possible violations of IX L'.S.C $641 
(embezzlement and theft) and 18 U.S.C. §2511 (interception and disclosure of electronic 
communications). In 2011. Do.l declined prosecution. The subject retired in 2012 before 
disciplinary action had been taken. 



UNCLASSIFIED 



2. Civilian Employee, Foreign Location 

In 2005. during a pre-retirement reinvestigation polygraph and intcr\ iovs. the subject 
reported that, in 2003. he tasked S1GINT collection of the telephone number of his loreign- 
nalionul girlfriend without an authorized purpose lor approximately one month to determine 
whether she was "involved with any | local) government officials or other activities thai might uet 
|him| in trouble." 

I he NSA OKi determined thai the subject's actions v iolated Executive Order 
I.)oD Reuulation 5240.1 -R. 5 I T.R. f 26.15.704. and NSA/CSS I'MM 30-2. Chapter 3(>6. {j$ 1-3 



am 



m s report uas shared with the NSA OlT.ee of General C ounsel (OGC) for an 
assessment as to whether referral to l)o.l was appropriate. Records are insufficient to determine 
whether a referral was made. The subject retired before the OIG investigation was finalized. 

3. C ivilian Employee, Foreign Location 

In 2004. u|X'ii her return from a foreign site, the subjeci reported to NSA Securitv that, in 
2004. she tasked a foreign telephone number she had discovered in her husband's' cellular 
telephone because she suspected that her husband had been unfaithful. The tasking resulted in 
voice collection of her husband. 



I he NSA OKi determined that the subject's actions violated USS1I) 1 8. Incentive Order 
12333. 5 G.F.R. §2ft35. 704. and Dol) Regulation 5240.1 -R. and possiblv IK C.S.C. $25 1 1 
( interception and disclosure of electronic communications). 



The OIG report uas forwarded to NSA's OGC. which referred the matter to DoJ. I he 
subject of the investigation resigned before the proposed discipline of removal was administered 

4. Civilian Employee. For eign Location 

In 2003. the appropriate OIG was notilied that an employee had possiblv violated 
I SSID 18. A female loreign national employed bv the I .S. government, with whom the subject 
was having sexual relations, told another government emplovee that she suspected that the 
subject was listening to her telephone calls. The other emplovee reported the incident. 

I he inv estigation determined that, from approximately IW8 to 2003. the employee 
tasked nine telephone numbers of female foreign nationals, without a valid fore inn intelligence 
purpose, and listened to collected phone conversations while assigned to foreign locations^" The 
subject conducted call chaining on one of the numbers and tasked the resultanl'numbers. He also 
meidentallv collected the communications of a U.S. person on two occasions. 

The appropriate agency referred the matter to Do.). The subject was suspended without 
m landing the outcome uf the investigation and resigned before discipline had been proposed. 



IM€1 ASS I PIED 



5. Civilian Kmployee, Foreign Location 

The employee's agency discovered thai an employee had misused the SKiINT collection 
system between 200! and 2M3 by targeting three female foreign nationals. 

live appropriate OIG conducted an investigation. Hie violations were referred to Do I 
I he subject resigned bclore disciplinary action uas taken. 



6. ( ivilian F.mployee, Foreign Location 

As the result erf a polygraph examination, it uas discos cred that an emploNcc had 
accessed the collection ol communications on two foreign nationals. 



onc-vcar 



I he employee's agency concluded its investigation in 200o. and the subject received a 
stf letter ol reprimand (prohibiting promotions, auards. and uithin-urade increases) and a 
10 day suspension w.thout pa>. I he subject's pending permancnt-change^l-s.a.ion assignment 
was cancelled, and his promotion recommendation was withdrawn. 



7. Civilian Employee, Foreign Location 



number 
re 



In 01 I. the NSA OIO was notilted thin, in 201 1. the subject bad tasked the telephone 

; m J* '^'yn-mtnonal boyfriend and other foreign nationals and that she reviewed the 

tmmm collection. 1 he subject reported this activity during an in\ estimation into another matter. 

The subject asserted that it was her practice to enter foreiun national phone number she 
obtained ,n social settings into the SIGINT system to ensure .haf she was not talking to ",h ;K h 
characters and to help mission. 

l U ()Ki ibund ** lhc ^'h.iecfs actions polenlialK violated Lxecutivc Order 

1--v>.\ Part l.7(c)(l ). and DoD Regulation 5240.1-R. Procedure 14. 

4*i - « ? .Sf? 8 &tQ 1 ' l -' lenctl lhc maUcr * m '» 201 ! w a P«W«*e violation of 

It- L.S C PSII (mtereeption and disclosure of electronic communications). The subject 

resigned hclorc disciplinary action had been imposed. 



H. Military Member, ('ONUS Site 

^" 5 : ll,C NSA 0ICi was **** **■ * subjeefs ftm dav of access to the 
SK.IM collection system, he queried six e-mail addresses belonging to a former girlfriend a 

ES W \ T :U,,h °; i/:i,ion - A * ite SIOWT audi, discovered the queries four 

days alter (he\ had occurred. 



The subject testified that he wanted fo practice en the system and had decided to use this 
former girlfriend's e-mail addresses. lie also testified that he received no information as a result 
uf his queries and had not read any I '.S. person's e-mail. 

I he NSA ()l(i concluded tliat the subject's actions violated USSII) 18. I\cculive Order 
12333, 5 (. I K S2635.704. and Pol) Regulation 524U.1-R. 

The OKI report was forwarded to the site command anil the OGC. As a result of a 
Uniform Code of Military Justice Article J5 proceeding, the subject received a reduetiun in 
grade. 45 days restriction. 45 days of extra duly, and half pay lor two months. It was 
recommended that the subject nol be given a security clearance. 

9. C hilian Employee, C'ONUS Site 

In 2006. the Office of Oversight and Compliance within NSA's Signals Intelligence 
Directorate informed NSA OIG that, between 2005 and 2006. the subject had Without 
authorization queried in two SIGINT systems the telephone numbers of two foreign nationals, 
one of whom was his girlfriend. On one occasion, the subject performed a text query of his own 
name in a SK ills' ! system. 

1 he OIG investigation found that the subject queried his girlfriend's telephone number on 
many occasions and her name on two. He testified that he received only one "hit" from the 
queries on the girlfriend. Another number he queried, that of a foreign national language 
instructor, returned '"insignificant information." 

The subject claimed that he queried his name to see if any one was discussing his travel 
and the telephone numbers (o ensure that there were no security problems. 

The OIG concluded that the subject's actions violated Executive Order 12333:, 5 C.I'.R. 
§2635.704. DoD Regulation 5240. 1 -R. and NSACSS PMM. Chapter 366 (General Principles for 
on the job conduct: Use of Government Resources, and Insubordination). 

The Agency has been unable to locale records as to whether a referral was made to Do.l. 
I he subject resigned from the Agency before the proposed discipline of removal had been 
administered. 

10. C ivilian Employee, C'ONUS Site- 

In 2008. the NSA OIG was notified that a SIGINT audit had discovered a possible 
violation of USSR) IS. An investigation revealed that, while reviewing the communications of a 
valid intelligence target, the subject determined that the intelligence Uirget had a relative in the 
U.S. I he subject queried the SIGIN I system for the e-mail address of The intelligence target in 
2008 and used other search terms to obtain information about the target's relative. 
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I he OiCi concluded thai the subjecl's actions v iolalcd I S.SII) IS. I Aecutive Order 12331 
and DoD Regulation 5240. ]-R. 

I he ( m , report u.-.s forwarded to NS.Vs ( K K . 1 he subject received a written reprimand. 

1 1. Military Member, Foreign Location 

In the N'SA Old was notified that, in 2000. a milifars member assigned to a 

military tactical intelligence unit queried the communications of his wife, who vuis also a 
military member stationed in a foreign location. I he misuse was discovered hv a rev iew of 
SK.1N I audit logs. I he investigation by his military unit substantiated the misuse. ' 

Ihroimh a I Worm Code of Military Justice Article 15 proceeding, the member received 
a reduction m rank. 45 days extra dutv. and half pay for two months, the member's access to 
elassilied information was revoked. 

In 2009 this matter was referred to Do.l. 



12. Military Member, Foreign Location 

In 200'). a military unit at a foreign location noiilied the NSA OKI that in ?0U9 a 
mihlarv member had queried a country Is telephone numbers to aid in leumi.iu that countrvs 
language. I he misuse was discovered by a rev iew of SKilMT audit logs. 

The appropriate branch of the military determined that the analyst's queries were not in 
support ol his official duties and violated U.SSII) 18. 

1 he member's database access and access to elassilied information were suspended. 

I hope that this information satisfies your request. 

Sincerely. 

Dr. (ieorge El lard 
Inspector General 



ec: Sen. Patrick l.eahv 



